CVE-2026-22718 — Vulnetix

Try Vulnetix Request Demo

CVE-2026-22718 PUBLISHED

On March 19, 2026, Spring published security advisories to address vulnerabilities in the following products. Included was a critical update for the following: Spring Boot – multiple versions Spring Security – multiple versions The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

EPSS 0.04% · 12.3th percentile

Risk Scores

EPSS Score

0.04%

12.3th percentile

Affected Products

Vendor	Product	Versions
VMware	Spring Security – multiple versions
VMware	Spring Boot – multiple versions

Timeline

Jan 9, 2026 CVE ID Reserved
Jan 14, 2026 EPSS Score
Jan 14, 2026 CVE Published
Jan 14, 2026 PoC Published
Jan 14, 2026 PoC Published
Jan 14, 2026 CVE Updated
Jan 15, 2026 PoC Published
Jan 16, 2026 EPSS Score
Jan 19, 2026 EPSS Score
Jan 21, 2026 EPSS Score
Jan 24, 2026 EPSS Score
Jan 26, 2026 EPSS Score

References

https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-259 advisory
https://spring.io/security/cve-2026-22731 vendor
https://spring.io/security/cve-2026-22732 vendor
https://spring.io/security/cve-2026-22733 vendor
https://spring.io/security vendor

Open in Interactive Console →